CLAIM AMENDMENTS 



Claim Amendment Summary 
Claims pending 

• Before this Amendment: Claims 1-4, 6, 10, 19, 21, 22, and 36-60. 

• After this Amendment; Claims 1-4, 6, 10, 19, 21, 22, and 36-60 
Non-Elected, Canceled, or Withdrawn claims: 5, 7-9, 11-1 8, 20, and 23-35 
Amended claims: 2, 38, 45, 52, and 59 

New claims: none 



Claims: 

1. (Previously Presented) A method, comprising: 

a first electronic device digitally signing a web page, wherein the web page 
includes code to invoke a control object, and wherein the web page does not 
include the control object; and 

subsequent to digitally signing the web page, the first electronic device 
delivering the web page to a second electronic device capable of authenticating the 
source of the web page based on the digital signature such that the second 
electronic device executes at least a portion of the web page in response to 
authenticating the digital signature. 



2. (Currently Amended) The method as recited in claim 1, wherein the 
associating digitally signing further comprises attaching the digital signature to the web 
page. 
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3. (Previously Presented) The method as recited in claim 1, further comprising: 
in an event that the web page does not include code to invoke the control object, 
the first electronic device delivering the web page without a digital signature. 

4. (Previously Presented) The method as recited in claim 1 , wherein the web 
page includes a confirmation module that is used by the second electronic device to 
authenticate the digital signature. 

5. (Canceled) 

6. (Original) The method as recited in claim 1, wherein the web page is 
generated in an active server page (ASP) environment. 

7-9 (Canceled) 

10. (Previously Presented) The method as recited in claim 1, further 
comprising designating one or more sources of a web page authorized to invoke the 
control object. 



11-18 (Canceled) 
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19. (Previously Presented) The method as recited in claim 1, wherein the 
control object includes a confirmation module configured to authenticate the digital 
signature. 

20. (Canceled) 

21. (Previously Presented) The method as recited in claim 19, wherein the 
confirmation module is further configured to determine if the web page comes from a 
source that is authorized to invoke the control object and the control object is invoked 
only if the source of the web page is authorized to invoke the control object. 

22. (Previously Presented) The method as recited in claim 19, wherein the 
confirmation module is called by the web page prior to the web page invoking the 
control object. 

23 - 35 (Canceled) 
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36. (Previously Presented) A method, comprising: 

a first electronic device receiving from a second electronic device, a request to 
download a web page; and 

in response to receiving the request, the first electronic device: 

determining whether the web page includes code to invoke a control object; 

in an event that the web page includes code to invoke a control object, the 
first electronic device digitally signing the web page; and 

delivering the web page to the second electronic device, wherein the second 
electronic device is capable of authenticating the source of the web page based on 
the digital signature such that the second electronic device executes at least a 
portion of the web page in response to authenticating the web page digital 
signature. 

37. (Previously Presented) The method as recited in claim 36, wherein a 
control object digital signature is associated with the control object. 

38. (Currently Amended) The method as recited in claim 36, wherein 
a ss e e ieting-th e -w e b pag e- digit - al - signatur e with digitally signing the web page fiarther 
comprises deriving the web page digital signature. 
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39. (Previously Presented) The method as recited in claim 36, further 
comprising: 

in an event that the web page does not include code to invoke the control object: 

in response to receiving the request, the first electronic device delivering 
the web page to the second electronic device without the web page digital 
signature. 

40. (Previously Presented) The method as recited in claim 36, wherein the 
web page includes a confirmation module that is used by the second electronic device to 
authenticate the web page digital signature. 

41. (Previously Presented) The method as recited in claim 36, wherein the 
control object includes a confirmation module configured to authenticate the web page 
digital signature. 

42. (Previously Presented) The method as recited in claim 36, further 
comprising a confirmation module determining whether a source of the web page is 
authorized to invoke the control object such that the web page is prevented fi-om 
invoking the control object if the source of the web page is not authorized to invoke the 
control object. 

43. (Previously Presented) The method as recited in claim 41, further 
comprising the second electronic device invoking the confimiation module prior to 
executing the code to invoke the control object. 
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44. (Previously Presented) A method, comprising: 

a first electronic device determining whether a web page includes code to invoke a 
control object, wherein the control object does not have an associated digital signature; 
and 

based on a determination that the web page includes code to invoke the control 

object: 

the first electronic device digitally signing the web page; and 
subsequent to digitally signing the web page, the first electronic device 
delivering the web page to a second electronic device capable of authenticating a 
source of the web page based on the digital signature such that the second 
electronic device executes the code to invoke the control object in response to 
authenticating the digital signature, and such that the second electronic device 
prevents execution of the code to invoke the control object in response to failing to 
authenticate the digital signature. 

45. (Currently Amended) The method as recited in claim 44, wherein 
associating attaching the digital - signature w - ith - te digitally s i gning the web page fiirther 
comprises deriving the digital signature. 
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46. (Previously Presented) The method as recited in claim 44, further 
comprising: 

based on a determination that the web page does not include code to invoke the 
control object: 

the first electronic device delivering the web page to the second electronic 
device without the digital signature. 

47. (Previously Presented) The method as recited in claim 44, wherein the 
web page includes a confirmation module that is used by the second electronic device to 
authenticate the digital signature. 

48. (Previously Presented) The method as recited in claim 44, wherein the 
control object includes a confirmation module configured to authenticate the digital 
signature. 

49. (Previously Presented) The method as recited in claim 44, further 
comprising a confirmation module determining whether a source of the web page is 
authorized to invoke the control object such that the web page is prevented from 
invoking the control object if the source of the web page is not authorized to invoke the 
control object. 

50. (Previously Presented) The method as recited in claim 49, further 
comprising the second electronic device invoking the confiraiation module prior to 
executing the code to invoke the control object. 

Serial No.: 09/650,712 
Atty Docket No.: MS1-0579US 
Atty/Agent: Bea Koempel-Thomas 
Amendment after allowance 



iee@hayeS The Business of IP 



51. (Previously Presented) A method, comprising: 

a first electronic device determining whether a web page includes code to invoke a 
control object, wherein a first digital signature is associated with the control object; 

based on a determination that the web page includes code to invoke the control 
object, the first electronic device digitally signing the web page with a second digital 
signature; and 

subsequent to digitally signing the web page with the second digital signature, the 
first electronic device delivering the web page to a second electronic device capable of 
authenticating the source of the web page based on the second digital signature such that 
the second electronic device executes the code to invoke the control object in response to 
authenticating the second digital signature, and such that the second electronic device 
prevents execution of the code to invoke the control object in response to failing to 
authenticate the source of the web page based on the second digital signature. 

52. (Currently Amended) The method as recited in claim 51, wherein 
associating th e s e cond digital signature with digitally signing the web page further 
comprises deriving the second digital signature. 
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53. (Previously Presented) The method as recited in claim 51, further 
comprising: 

based on a determination that the web page does not include code to invoke the 
control object: 

the first electronic device delivering the web page to the second electronic 
device without the second digital signature. 

54. (Previously Presented) The method as recited in claim 51, wherein the 
web page includes a confirmation module that is used by the second electronic device to 
authenticate the second digital signature. 

55. (Previously Presented) The method as recited in claim 51, wherein the 
control object includes a confirmation module configured to authenticate the second 
digital signature. 

56. (Previously Presented) The method as recited in claim 51, further 
comprising a confirmation module determining whether a source of the web page is 
authorized to invoke the control object such that the web page is prevented from 
invoking the control object if the source of the web page is not authorized to invoke the 
control object. 

57. (Previously Presented) The method as recited in claim 56, further 
comprising the second electronic device invoking the confirmation module prior to 
executing the code to invoke the control object. 
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58. (Previously Presented) 



One or more tangible computer-readable media 



comprising computer- executable instructions that, when executed, direct a first 
computing device to: 

determine whether a web page includes code to invoke a control object, wherein 
the control object does not have an associated digital signature; and 

based on a determination that the web page includes code to invoke the control 
object, digitally signing the web page, wherein the digital signature is not directly 
associated with the control object; and 

deliver the web page to a second computing device capable of authenticating the 
source of the web page based on the digital signature such that the second computing 
device executes the code to invoke the control object in response to authenticating the 
source of the web page based on the digital signature, and such that the second computing 
device prevents execution of the code to invoke the control object in response to failing 
to authenticate the source of the web page based on the digital signature. 
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59. (Currently Amended) One or more tangible computer-readable media 
comprising computer-executable instructions that, when executed, direct a first 
computing device to: 

determine whether a web page includes code to invoke a control object, wherein a 
first digital signature is associated with the control object; 

based on a determination that the web page includes code to invoke the control 
object, digitally signing sign the web page with a second digital signature; and 

deliver the web page to a second computing device capable of authenticating the 
source of the web page based on the second digital signature such that the second 
computmg device executes the code to invoke the control object in response to 
authenticating the source of the web page based on the second digital signature, and such 
that the second computing device prevents execution of the code to invoke the control 
object in response to failing to authenticate the source of the web page based on the 
second digital signature. 
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60. (Previously Presented) A system comprising: 

a page generator to generate a web page, wherein the web page includes a control 

object; 

a digital signature module to: 

determine whether the web page includes a script to invoke the control 

object; 

derive a digital signature from the web page; 

based on a determination that the web page includes a script to invoke the 
control object, digitally signing the web page such that the digital signature is not 
directly associated with the control object, but is associated with the source of the 
web page; and 

a web page delivery module to deliver the web page to an electronic device. 
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